* fix custom css requiring the user to be the admin and logged in * move theme api to custom endpoint * add e2e test